Shulou(Shulou.com)06/01 Report--

This article is about how to use OD to crack winRAR advertising, the editor thinks it is very practical, so I share it with you to learn. I hope you can get something after reading this article.

Recently, due to some needs, I have used a virtual machine, but when using winRAR, ads always pop up automatically, and it is obvious that I waste a lot of time turning off ads manually every time. So today I tried to use OD to crack the advertisement of winRAR.

First of all, we need to determine what this pop-up window is.

We know that in Windows programming, there is a function called "CreateWindowsEx" that specializes in pop-up windows.

For more information about this function, see the Windows reference documentation: https://msdn.microsoft.com/en-us/library/windows/desktop/ms632680(v=vs.85).aspx

We reasonably guess that winRAR uses this function to achieve the function of pop-up advertising.

1. Use Ollydbg to open the winRAR main program, right-click the main thread-find-the name of the current module.

two。 Type "CreateWindowsEx" directly to find the module. Right-find input function reference. As shown in the figure:

3. After the window pops up, right-click in the space and set a breakpoint on each command. Then go back to the main thread and click the continue button (the red triangle)

4. Keep clicking the continue button until the ad pops up. When it runs here, it pops up the ad, and we can be sure that this part has something to do with the pop-up window.

All the upper parts of the 5.CreateWindowExw are selected until ASCII, and then Del. They will all become NOP. Then right-copy to the executable file-select, and then pop up a small window to save X directly, as shown in the picture, it is best to rename it.

6. Open the program (if you can't open the program, there must be a problem in the previous step, try removing one / more lines from the yellow box), and find that the advertisement has been removed, but there are still frames.

7. Continue to open the new winRAR with Ollydbg and repeat steps 1-6 to remove the box (because the principle is the same, the function is removed).

The above is how to use OD to crack winRAR advertisements. The editor believes that there are some knowledge points that we may see or use in our daily work. I hope you can learn more from this article. For more details, please follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.